From: Boaz Harrosh <bharrosh@panasas.com>
Date: Wed, 1 Aug 2012 14:48:36 +0000 (+0300)
Subject: ore: Fix out-of-bounds access in _ios_obj()
X-Git-Tag: v3.6-rc2~32^2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9e62bb4458ad2cf28bd701aa5fab380b846db326;p=pandora-kernel.git

ore: Fix out-of-bounds access in _ios_obj()

_ios_obj() is accessed by group_index not device_table index.

The oc->comps array is only a group_full of devices at a time
it is not like ore_comp_dev() which is indexed by a global
device_table index.

This did not BUG until now because exofs only uses a single
COMP for all devices. But with other FSs like PanFS this is
not true.

This bug was only in the write_path, all other users were
using it correctly

[This is a bug since 3.2 Kernel]
CC: Stable Tree <stable@kernel.org>

Signed-off-by: Boaz Harrosh <bharrosh@panasas.com>
---

Reading git-diff-tree failed